Output Module Current Control with Dual Management Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial process control systems face challenges in achieving fault tolerance, particularly in managing current sources due to the complexity and cost of implementing redundancy and hot-standby modules, especially in ensuring quick detection and isolation of faults in output modules.
Innovation Solution
The output module comprises two management units that calculate and independently monitor the current demand, with each unit providing a portion of the total output current, allowing for quick failure detection and seamless switching to a fail-safe mode using an improved isolation circuit and continuous testing of the isolation circuit's functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If redundancy is implemented to achieve fault tolerance, then system reliability is improved, but device complexity and cost increase
Solution Approach 1:
The output module is segmented into two independent management units, each capable of independently calculating current demand and controlling output current. This segmentation allows the system to maintain functionality with reduced complexity compared to fully redundant systems, as each unit operates autonomously without requiring complete duplication of the entire control architecture.
Solution Approach 2:
The system dynamically switches between management units based on operational status. When one management unit fails, the system automatically transitions to using the other unit, providing fault tolerance through dynamic reconfiguration rather than static redundancy. This dynamic approach reduces overall system complexity while maintaining reliability.
2Reliability
If hot-standby modules are used to provide fault tolerance, then system reliability is improved, but response time during changeover increases
Solution Approach 1:
Both management units continuously calculate current demand and remain operational simultaneously, with each unit capable of independently controlling the output current. This eliminates the need for changeover periods because the system maintains continuous useful action through parallel operation of both units, transitioning seamlessly from one unit to the other without interruption.
Solution Approach 2:
The standby management unit continuously monitors and calculates current demand in advance, so when a failure occurs, it is already prepared to take control immediately without requiring any changeover time. This preliminary preparation of the backup unit eliminates delays in fault response.
3Reliability
If dedicated hardware and software test regimes are implemented for fast fault recognition, then system safety is improved, but device complexity increases
Solution Approach 1:
Each management unit continuously monitors its own operational status and automatically detects faults without requiring external test equipment or complex diagnostic systems. The management units perform self-testing by monitoring their own current calculations and output control, simplifying the overall test and diagnostic infrastructure while maintaining fast fault recognition.
Solution Approach 2:
The system implements continuous feedback monitoring where each management unit monitors the operational status of the other unit and adjusts its operation accordingly. This feedback mechanism enables automatic fault detection and response without requiring complex external test regimes, reducing system complexity while maintaining safety.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This invention relates to an apparatus and method for output current control in an Industrial Process Control System. The output module comprises two management units each of which calculates the current demand for the module independently from one another. One management unit controls an output current controller whilst the other unit monitors the current produced by the output current controller against an independently calculated demand. The output module has multiple output modules. However rather than one module providing a backup for the other modules, or alternating between use of each module, in normal operation, each module provides a portion of the required output current, the total output current being equal to the sum of the currents output by each module. In the event of failure on one of the modules, the other module or modules switch to providing the total current required and the failed module is switched to a fail safe mode by using an isolation circuit to switch off the output current from that module. The output module also provides improved fail safe protection by providing an improved isolation circuit and an improved method of continually testing that the isolation circuit will operate correctly in the event that it is required to switch a module to a fail safe mode.